Cannot install SSL certificate to a brand - Private key does not match the certificate
Modified on: Wed, 14 Feb 2024 4:25 PMSymptoms
We get this error when trying to install an SSL certificate to a brand:
Invalid data
Private key does not match the certificate
Cause
Your private key does not match the certificate.
Resolution
Verify that the results of the below commands for your certificate file and private key file are the same (substitute your real file names):
$ openssl x509 -noout -modulus -in cert.crt | openssl md5
MD5(stdin)= 8d46280202f224747c544ab3ec64915d
$ openssl rsa -noout -modulus -in private_key.pem | openssl md5
MD5(stdin)= 52198de8819908c8f74ccbed3407b100
Note: The above commands should work fine for crt/pem/key extensions.
If the above two commands return different results (as in the above example), double-check that you are using a correct key pair.